New QuestionNote: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.Start of repeated scenario.Your company has a network that contains an Active Directory forest named fabrikam.com. The forest is synchronized to a Microsoft Azure Active Directory (Azure AD) tenant and has an Azure subscription.The company also has an Azure AD tenant named contoso.com. Contoso.com has an Azure subscription. Contoso.com includes foreign principals. The network contains the computers configured as shown in the following table.

Fabrikam.com contains a user named User1.For operating system deployment, the company uses a custom operating system image of Windows Server 2016 Datacenter named Image1.You have an Azure Stack integrated system that is accessed by using the following endpoints:https://portal.fabrikam.comhttps://adminportal.fabrikam.comhttps://management.fabrikam.comPrivileged endpoint: 192.168.100.100Hardware lifecycle host: 192.168.101.101https://adminmanagement.fabrikam.comYou onboard contoso.com as a guest directory tenant on the Azure Stack integrated system.You implement in the following Azure Stack providers:SQL ServerApp ServiceStart of repeated scenario.You need to install the Azure Stack Development Kit on Server1. You download and extract all the required development kit components to Server1.What should you do first?

A. Install the Azure PowerShell module.B. Modify the BIOS on Server1.C. Run the Asdk-Installer.ps1 scriptD. Run the RegisterWithAzure.ps1 script.

Answer: C

New QuestionNote: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.Start of repeated scenario.Your company has a network that contains an Active Directory forest named fabrikam.com. The forest is synchronized to a Microsoft Azure Active Directory (Azure AD) tenant and has an Azure subscription.The company also has an Azure AD tenant named contoso.com. Contoso.com has an Azure subscription. Contoso.com includes foreign principals. The network contains the computers configured as shown in the following table.

Fabrikam.com contains a user named User1.For operating system deployment, the company uses a custom operating system image of Windows Server 2016 Datacenter named Image1.You have an Azure Stack integrated system that is accessed by using the following endpoints:https://portal.fabrikam.comhttps://adminportal.fabrikam.comhttps://management.fabrikam.comPrivileged endpoint: 192.168.100.100Hardware lifecycle host: 192.168.101.101https://adminmanagement.fabrikam.comYou onboard contoso.com as a guest directory tenant on the Azure Stack integrated system.You implement in the following Azure Stack providers:SQL ServerApp ServiceStart of repeated scenario.You need to ensure that the foreign principals for contoso.com can access Azure Stack services. Which URL should the foreign principals use to sign in to Azure Stack?

New QuestionYou deploy a new Azure Stack integrated system.You plan to add several Marketplace items from Microsoft Azure to the Azure Stack Marketplace. You need to ensure that you can download the Marketplace items from Azure.Solution: You register Azure Stack with Azure.Does this meet the goal?

A. YESB. NO

Answer: A

New QuestionYou deploy a new Azure Stack integrated system.You plan to add several Marketplace items from Microsoft Azure to the Azure Stack Marketplace. You need to ensure that you can download the Marketplace items from Azure. Solution: You install the Azure Gallery Packager tool.Does this meet the goal?

A. YESB. NO

Answer: B

New QuestionYou deploy a new Azure Stack integrated system.You plan to add several Marketplace items from Microsoft Azure to the Azure Stack Marketplace.You need to ensure that you can download the Marketplace items from Azure.Solution: You run the MarketplaceToolkit.psi script.Does this meet the goal?

A. YESB. NO

Answer: B

New QuestionYou have an Azure Stack integrated system that uses a Microsoft Azure Active Directory (Azure AD) domain named contoso.com as the identity provider. The system has a tenant subscription that contains several resources.In contoso.com, you create a new user named User1.User 1 reports that when signed in to the Azure Stack user portal, no resources are displayed. You need to ensure that User1 can view the resources on the portal. Solution: On the tenant Subscription, you assign the Reader role to User1.Does this meet the goal?

A. YesB. No

Answer: AExplanation:A user needs at least the reader role to be able to view resources in a tenant subscription.

New QuestionYou have an Azure Stack integrated system that uses a Microsoft Azure Active Directory (Azure AD) domain named contoso.com as the identity provider. The system has a tenant subscription that contains several resources.In contoso.com, you create a new user named User1.User 1 reports that when signed in to the Azure Stack user portal, no resources are displayed. You need to ensure that User1 can view the resources on the portal.Solution: On the Default Provider Subscription, you assign a role to User1.Does this meet the goal?

A. YesB. No

Answer: BExplanation:There are two portals in Azure Stack; the administrator portal and the user portal (sometimes referred to as the tenant portal.)The Default Provider Subscription is the administrator portal. The user needs to be assigned a role in the tenant (user) subscription, not the Default Provider (admin) subscription.References:https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-manage-portals

New QuestionYou have an Azure Stack integrated system that uses a Microsoft Azure Active Directory (Azure AD) domain named contoso.com as the identity provider. The system has a tenant subscription that contains several resources.In contoso.com, you create a new user named User1.User 1 reports that when signed in to the Azure Stack user portal, no resources are displayed. You need to ensure that User1 can view the resources on the portal. Solution: On the Default Provider Subscription, you add User1 to an Azure AD group and assign a role to the group.Does this meet the goal?

A. YesB. No

Answer: B

New QuestionYou have an Azure Stack integrated system.You implement an App Service resource provider.Your network contains a load balancer.You plan to use the load balancer to load balance SSL traffic to web apps that are provisioned based on the App Services.You need to configure the IP SSL settings of the App Service resource provider. Which configuration should you use for the internal HTTPS port?

A. Option AB. Option BC. Option CD. Option D

Answer: A

New QuestionYou have an Azure Stack integrated system in the perimeter network. You need to ensure that users in the Internet can access Azure Stack Storage blobs.Which TCP ports should you open on the firewall?

New QuestionYou have an Azure Stack integrated system.You establish a PowerShell session to a privileged endpoint, and you run several commands. You need to ensure that logs of the session activity are exported to a file share.Which cmdlet should you run?

Answer: DExplanation:The privileged endpoint logs every action (and its corresponding output) that you perform in the PowerShell session. You must close the session by using the Close-PrivilegedEndpoint cmdlet. This cmdlet correctly closes the endpoint, and transfers the log files to an external file share for retention.Incorrect Answers:A, E: If you close the privileged endpoint session by using the cmdlets Exit-PSSession or Exit, or you just close the PowerShell console, the transcript logs do not transfer to a file share. They remain in the privileged endpoint. The next time you run Close-PrivilegedEndpoint and include a file share, the transcript logs from the previous session(s) will also transfer. References: https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-privileged-endpoint#close-the-privileged-endpoint-session